Tobias Brunner
4aa24d4c13
RFC 7427 signature authentication is now used between strongSwan hosts by default, which causes the actual signature schemes to get logged.
22 lines
1.7 KiB
Plaintext
22 lines
1.7 KiB
Plaintext
moon:: cat /var/log/daemon.log::parsed IKE_AUTH request.*N(AUTH_FOLLOWS)::YES
|
|
moon:: cat /var/log/daemon.log::authentication of .*carol@strongswan.org.* with RSA.* successful::YES
|
|
carol::cat /var/log/daemon.log::authentication of .*moon.strongswan.org.* with RSA.* successful::YES
|
|
carol::cat /var/log/daemon.log::server requested EAP_SIM authentication::YES
|
|
moon:: cat /var/log/daemon.log::received EAP identity .*228060123456001::YES
|
|
moon:: cat /var/log/daemon.log::authentication of .*228060123456001@strongswan.org.* with EAP successful::YES
|
|
moon:: ipsec status 2> /dev/null::rw-mult.*ESTABLISHED.*228060123456001@strongswan.org::YES
|
|
carol::ipsec status 2> /dev/null::home.*ESTABLISHED.*228060123456001@strongswan.org::YES
|
|
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::YES
|
|
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
|
|
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
|
|
moon::cat /var/log/daemon.log::authentication of .*dave@strongswan.org.* with RSA.* successful::YES
|
|
dave::cat /var/log/daemon.log::authentication of .*moon.strongswan.org.* with RSA.* successful::YES
|
|
dave::cat /var/log/daemon.log::server requested EAP_SIM authentication::YES
|
|
moon::cat /var/log/daemon.log::received EAP identity .*228060123456002::YES
|
|
moon::cat /var/log/daemon.log::RADIUS authentication of '228060123456002' failed::YES
|
|
moon::cat /var/log/daemon.log::EAP method EAP_SIM failed for peer 228060123456002@strongswan.org::YES
|
|
moon::ipsec status 2> /dev/null::rw-mult.*ESTABLISHED.*228060123456002@strongswan.org::NO
|
|
dave::cat /var/log/daemon.log::received EAP_FAILURE, EAP authentication failed::YES
|
|
dave::ipsec status 2> /dev/null::home.*ESTABLISHED::NO
|
|
dave::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::NO
|